Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“ne plus utiliser l'application”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1c0bc8b601ef78f6e1bbf7a1a0036af04e92e842f95ae5d01f555c6ef68015a8
Signature (Ed25519, base64)
AST2SJy88b+aa1IUeAC/ovIgJQ3Rsho2bqr586C63NBnk2ue/baAhKts2A8B1y7LiXY4fEyp9ETgXlwfLMmJBg==
Merkle root
cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path
["1c09e8ea711d3e2c5bc1458b4991288b40ccfef3566d5f23ea238f9efcfe90a4","adc5db4d54c866cef9fcf7e55651d361b98743d0b8b70a801a90633333b8109b","39784abb943b6029dc3b6e699b641b45042940336c74d331edcb4c06210a4c39","c30192bd59d0d5d918a96d7b37b501fc5e8b8c2503e34973066e8f71e9f240dc","00b196689f2c9010bf445c4c77f66addabfa28311b900e4779bb5703313b2b9e","818d6dea7befa1cde3c0b09ae685f721c2ccd04399d4ed165fcb93cce29050f9","d60bea823b42d2cd6d0048c953d68b9fcc8b0606b9b1261e08d01b0603ed3927","a8040d19b019767e1b4da0b35e7588efb8e53c9624eea2ca834ec0d643fb6507","e3a265ffe5bdbd50cca61a82d093e0d1d2c5a46d43d2fa1a861967fdbb37a3f4","5e12344c57a8c9a8202540b83312b5a26030128e940bf383d8c3569ee4361148","67d9484b75402cad6659f9dbbd1623f614dcd95f06b4433661e4075fc388fc9f","9f6fe8b8ba9f3011c0e6aa1e8b55f973467b9c20f251bdedad5d16d3227cbd49","a1c11df65738ffb18228c247fd6ad5fc76428a9130a0079c6abf079e9cdfe043","806b2b46dda360b28a8a38da683f56d42f23ab9c4a7b2fa07453f271a33f5ff0","57e3801fc0af4bd2492130e334ef2d0425fdcd10c95109df38ad0d371e279fbf"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash
d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787288037224","kind":"published-quote","locale":"fr","page":"theme:relai/service/fr","quote":"ne plus utiliser l'application","rating":1,"review_date":"2026-06-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.relai","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.